docuForm vulnerabilities
6 known CVE vulnerabilities in docuForm, translated and rated.
- CVE-2025-61310Medium
A reflected cross-site scripting (XSS) vulnerability in the acc-menu_billings.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
- CVE-2025-61309Medium
A reflected cross-site scripting (XSS) vulnerability in the dfm-menu_departments.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
- CVE-2025-61308Medium
A reflected cross-site scripting (XSS) vulnerability in the dfm-menu_maintenance.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
- CVE-2025-61307Medium
A reflected cross-site scripting (XSS) vulnerability in the acc-menu_papers.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
- CVE-2025-61306Medium
A reflected cross-site scripting (XSS) vulnerability in the dfm-menu_coveragealerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
- CVE-2025-61305Medium
A reflected cross-site scripting (XSS) vulnerability in the dfm-menu_firmware.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS